$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e9103f-3a39-4b56-abba-b19de9b5ff18.roa File: 62e9103f-3a39-4b56-abba-b19de9b5ff18.roa (raw, json) Hash identifier: inf46xGWuDIHw5uFSA/AK7CY3Ciq3b9gz4APulWPxvQ= Subject key identifier: CD:F3:2C:8A:2B:36:FC:F2:76:B0:83:F5:B1:D4:7B:A5:BE:76:3C:99 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: 5D249F56D735BCF1EA0F5B01D7209A5E340BF451 Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e9103f-3a39-4b56-abba-b19de9b5ff18.roa Signing time: Sat 21 Feb 2026 00:20:09 +0000 ROA not before: Sat 21 Feb 2026 00:20:09 +0000 ROA not after: Fri 22 May 2026 23:59:59 +0000 asID: 16509 IP address blocks: 2600:1f69:5000::/40 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 03 Mar 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:24:9f:56:d7:35:bc:f1:ea:0f:5b:01:d7:20:9a:5e:34:0b:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Feb 21 00:20:09 2026 GMT Not After : May 22 23:59:59 2026 GMT Subject: serialNumber=1a915fa92736419ba999d58f1d93bc2b7f0e95188207bfda661e93671c040450, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c8:04:13:dd:a5:39:82:1c:d3:d1:80:75:bc: 79:c8:c8:61:3a:bb:55:92:20:26:5a:ca:47:0a:e8: 35:50:ef:68:b8:b6:c4:22:e7:34:c5:2a:2e:03:07: 57:66:d2:0a:e8:14:98:70:76:9b:fb:a5:0c:6c:b3: 20:89:36:ab:0c:8e:69:11:c8:cd:6e:7d:ee:41:08: f6:67:81:aa:d1:03:4c:55:6c:de:cf:f6:5a:2e:3b: 77:63:81:b9:09:38:61:23:b7:13:f1:32:da:d1:98: 2b:27:9d:f7:67:d1:03:b2:ac:8f:f7:4a:85:3e:fd: 55:80:f3:22:5c:e9:4d:14:a7:28:d6:88:56:db:fd: 3a:d3:7f:b9:be:df:e3:9b:5a:15:29:1b:f1:6f:e0: ba:91:8d:b5:a2:08:8c:3c:76:48:fe:6a:57:59:93: 87:0a:32:2b:28:ac:87:41:8d:41:fd:60:24:cc:32: e6:d4:71:0e:54:07:4e:70:f6:c1:15:7d:bb:3f:eb: 16:95:48:ab:f9:e6:6f:e8:32:27:61:58:7b:cb:d5: dc:22:53:63:da:62:16:bc:47:df:ac:03:61:66:d6: 56:bf:51:88:4f:38:21:dc:ae:cd:26:2f:d1:7d:23: a5:a8:9a:d3:ed:bb:3a:2f:ee:b3:09:03:53:42:0c: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:F3:2C:8A:2B:36:FC:F2:76:B0:83:F5:B1:D4:7B:A5:BE:76:3C:99 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/62e9103f-3a39-4b56-abba-b19de9b5ff18.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2600:1f69:5000::/40 Signature Algorithm: sha256WithRSAEncryption c3:49:f4:11:2f:c0:1d:ee:78:4d:eb:40:ab:90:b7:d3:99:57: 6d:9a:8b:66:a3:55:88:94:f5:3c:a3:23:77:79:c3:0d:52:47: 21:b8:41:cd:36:b6:a1:ad:5c:39:d3:57:a2:1e:64:03:ee:84: 19:9e:f9:56:eb:9b:4a:ff:8e:9b:6b:8b:36:71:7b:5d:f5:30: a1:f7:9b:59:ff:64:23:e7:49:d9:e3:6d:ed:e2:ec:86:87:00: 26:64:09:30:08:0f:03:50:47:38:4e:23:61:06:a1:83:3b:43: 82:7d:85:03:e4:84:ab:b4:d6:3a:03:58:3d:d5:5f:92:68:7c: 1f:a0:04:44:63:8d:47:76:68:91:1f:6f:20:ef:1c:fa:f2:7e: 14:21:d3:ce:1b:fe:8f:f2:cd:f1:75:07:4f:96:7f:f5:44:65: bf:6d:52:d0:21:ae:1d:43:60:5c:4d:1e:f7:d7:d7:cf:6d:88: 1b:b9:cf:4a:c8:98:77:98:95:0e:a4:dc:10:02:18:b4:68:9a: 47:56:d3:f7:17:71:ac:57:41:5f:03:f3:71:45:62:01:38:d5: 70:72:d3:2a:8e:0f:52:15:46:2a:7e:06:fd:0c:72:1c:25:9e: 9b:8e:e2:7d:c9:70:57:1f:56:d7:f4:b0:fc:6b:30:df:4a:67: 2f:72:a0:ca -----BEGIN CERTIFICATE----- MIIF+jCCBOKgAwIBAgIUXSSfVtc1vPHqD1sB1yCaXjQL9FEwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYwMjIxMDAyMDA5WhcNMjYwNTIyMjM1OTU5 WjB6MUkwRwYDVQQFE0AxYTkxNWZhOTI3MzY0MTliYTk5OWQ1OGYxZDkzYmMyYjdm MGU5NTE4ODIwN2JmZGE2NjFlOTM2NzFjMDQwNDUwMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDQyAQT3aU5ghzT0YB1vHnIyGE6u1WSICZaykcK6DVQ72i4 tsQi5zTFKi4DB1dm0groFJhwdpv7pQxssyCJNqsMjmkRyM1ufe5BCPZngarRA0xV bN7P9louO3djgbkJOGEjtxPxMtrRmCsnnfdn0QOyrI/3SoU+/VWA8yJc6U0UpyjW iFbb/TrTf7m+3+ObWhUpG/Fv4LqRjbWiCIw8dkj+aldZk4cKMisorIdBjUH9YCTM MubUcQ5UB05w9sEVfbs/6xaVSKv55m/oMidhWHvL1dwiU2PaYha8R9+sA2Fm1la/ UYhPOCHcrs0mL9F9I6WomtPtuzov7rMJA1NCDGn7AgMBAAGjggKzMIICrzAdBgNV HQ4EFgQUzfMsiis2/PJ2sIP1sdR7pb52PJkwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzYyZTkxMDNmLTNhMzktNGI1Ni1hYmJhLWIxOWRlOWI1ZmYxOC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgAC MAgDBgAmAB9pUDANBgkqhkiG9w0BAQsFAAOCAQEAw0n0ES/AHe54TetAq5C305lX bZqLZqNViJT1PKMjd3nDDVJHIbhBzTa2oa1cOdNXoh5kA+6EGZ75VuubSv+Om2uL NnF7XfUwofebWf9kI+dJ2eNt7eLshocAJmQJMAgPA1BHOE4jYQahgztDgn2FA+SE q7TWOgNYPdVfkmh8H6AERGONR3ZokR9vIO8c+vJ+FCHTzhv+j/LN8XUHT5Z/9URl v21S0CGuHUNgXE0e99fXz22IG7nPSsiYd5iVDqTcEAIYtGiaR1bT9xdxrFdBXwPz cUViATjVcHLTKo4PUhVGKn4G/QxyHCWem47ifclwVx9W1/Sw/Gsw30pnL3Kgyg== -----END CERTIFICATE-----Generated at Mon Mar 2 04:54:29 2026 by rpki-client